Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/Tbb-a3qRbmUIhFRnU_CbIva1oNE.roa
File: Tbb-a3qRbmUIhFRnU_CbIva1oNE.roa (raw, json)
Hash identifier: lbSGa5/fwExfjOF9tILoPoTjaRQIIBqN312RtPHjz8E=
Subject key identifier: 4D:B6:FE:6B:7A:91:6E:65:08:84:54:67:53:F0:9B:22:F6:B5:A0:D1
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0185723124B0E5F624AA1E93906A9433279E
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/Tbb-a3qRbmUIhFRnU_CbIva1oNE.roa
Signing time: Mon 02 Jan 2023 11:15:01 +0000
ROA not before: Mon 02 Jan 2023 11:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44527
IP address blocks: 31.44.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:24:b0:e5:f6:24:aa:1e:93:90:6a:94:33:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Jan 2 11:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4db6fe6b7a916e650884546753f09b22f6b5a0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:09:5e:f8:ae:e1:89:65:dd:d3:b2:33:23:
41:cb:c5:49:76:a8:c6:ce:53:d4:8d:43:39:0b:70:
46:a0:01:c4:6e:7e:21:ce:9c:60:d2:ba:fe:f0:79:
8f:30:ef:df:9a:86:35:4e:ce:55:c6:c1:1d:b9:29:
e4:a5:d6:97:8d:20:99:50:47:ea:4e:2a:c0:2e:a4:
e2:76:56:e7:58:d0:75:74:dc:b2:63:72:6c:bf:db:
b7:bd:45:fe:6f:8c:2b:f2:16:8c:67:0b:09:57:90:
1f:b0:78:24:bf:6f:75:99:f7:7d:5d:5d:6a:54:a7:
a9:dc:c8:b2:15:14:06:1c:0b:93:a4:cc:bf:fc:06:
36:3d:b6:05:4a:29:b3:4b:5f:33:d7:c0:59:ef:1b:
fe:3b:cb:25:35:70:46:c7:67:ff:bd:a8:2b:1e:2f:
91:b4:39:d2:c0:6c:b0:b0:bc:b9:64:a7:d2:b4:a3:
b9:b8:71:8c:5f:9e:51:55:ba:81:ff:86:1c:d2:dd:
34:63:8b:03:f3:0f:9f:3f:98:be:06:b8:b3:ed:19:
36:af:b6:a6:8c:7b:85:71:28:fe:7b:d7:49:87:e3:
01:16:2b:c1:d8:91:02:6e:c9:85:ee:98:f2:4c:fd:
f9:22:06:0d:47:0e:bb:e8:e0:6b:81:0f:6b:ca:3f:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:FE:6B:7A:91:6E:65:08:84:54:67:53:F0:9B:22:F6:B5:A0:D1
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/Tbb-a3qRbmUIhFRnU_CbIva1oNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.214.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:23:6d:97:eb:ee:5b:21:1e:1e:04:2d:09:88:0a:79:49:ae:
dd:88:58:ae:b4:c8:d7:aa:69:60:3f:56:63:d2:27:ab:18:4b:
69:0b:3b:ad:12:ed:53:db:7d:65:90:a2:cd:e7:af:93:8a:dd:
8d:a4:dd:ee:b5:40:36:61:e2:c8:69:f9:e8:b6:f0:99:ba:de:
16:4f:58:88:eb:c8:f5:47:6e:7e:ab:78:09:47:5a:3b:78:7c:
17:c5:18:a8:7b:1f:29:5c:ff:a9:f3:fa:ca:4b:80:e8:16:8f:
0b:9e:8d:1a:9c:d3:db:c7:78:98:28:a3:8f:2e:58:0e:44:84:
81:dd:98:ad:67:8e:fb:7e:02:e2:80:ec:f1:ef:22:c2:a6:c5:
14:61:03:1f:76:2e:4a:c7:76:0b:0e:d4:c8:cc:8e:3d:ce:a2:
4a:31:56:28:62:3e:7f:18:76:64:5e:90:3a:40:c6:cb:1b:91:
0b:86:06:b4:27:71:14:15:fb:7b:5e:9d:d6:10:27:58:71:e9:
6f:f0:39:46:45:12:24:97:a4:2f:5d:44:f0:24:59:4d:a2:96:
bb:ce:f2:8a:32:18:d8:5f:61:59:44:7f:b8:83:81:3b:d9:e7:
67:b4:4f:37:5c:0c:5d:81:46:50:e4:cc:36:17:57:3b:c1:53:
be:c0:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:11 2024 by rpki-client on console-ams.rpki-client.org